JAM Card User Privacy Notice
When you apply for a JAM Card or register for the JAM Card app, we need to collect some personal details about you so we can send the card to you or give you access to the app. We will take all possible steps to protect personal information. We are determined to do nothing that would infringe your rights or undermine your trust. This Privacy Notice describes the information we collect about you, how it is used and shared, and your rights regarding it. We would also like to give you some updates or news about JAM Card but you can say no to this if you don’t want to receive it.
We think it is important to keep your information safe so other people cannot use the information you give us if you don't want them to.
This notice tells you more about
-
Why we collect information from you
-
What details we might need
-
How we use your details
-
How we keep your details safe
Who are we?
JAM Card is operated by NOW Group a social enterprise registered as a company and a charity in UK and ROI that provides support for people with learning difficulties, autism and other conditions.
Our Head office and address for the Data Protection Officer is
Ann Osborne
NOW Group
15-17 Grosvenor Road
Belfast BT12 4GN
email dpo@nowgroup.org
We are registered with the Information Commissioner’s Office (ICO) as a Data Controller for the personal data that we hold and process on your behalf. Our ICO registration number is ZA302134. If you need to contact us about your data or this privacy notice you can reach us at the above address.
How do we collect your personal information?
We collect your information when -
-
You register a JAM Card app
-
You order a JAM Card from us by phone or through our website.
What personal details do we collect?
We do not use automated decision-making in the processing of your personal data.
We collect and process both personal data and special categories of personal data. This includes:
For the JAM Card
-
Your name and address
-
Your email address
-
Gender
-
Year of birth
-
Your medical condition
For the JAM Card app
-
Your name
-
Your email address
-
Postcode
-
Gender
-
Year of birth
-
Your medical condition
-
Your location when you use the JAM card app
Why do we collect this information?
-
We collect this information so we can post the card to you or send the app to your device
-
So we can set up a JAM Card app account for you.
-
So we can give you news and updates if you would like to receive them
-
So that we can gather information about how many people use the JAM Card, the towns they live in, and the types of disabilities or conditions they have to help us raise awareness about the need for services to be more accessible.
-
To gather your ratings on the places you visit or the services you use.
-
To help us improve the training we deliver to JAM card friendly organisations by giving us more information about the profile of people using JAM Cards eg age groups, conditions and where they live.
-
We may need this information to apply for funding to provide JAM Cards and recruit more JAM Card friendly organisations.
Special Category Information
-
The information we collect on your condition is considered Special Category Information under data protection law. We have put in additional measures to protect your information. To do this we separate your contact details i.e. name, full address and email address from the information on your gender, postcode, year of birth and condition and store these separately
What lawful basis do we use for holding the information?
We will only process your personal information if we have a lawful basis to do so;
-
Consent. Where this required, we will ensure that we have your specific consent for processing your data. You can withdraw your consent by contacting us.
-
Legitimate interests.
Examples of legitimate interests include:
-
Where we process your data to provide you with the JAM Card or app;
-
provision of training and awareness services and advice;
-
Processing necessary for management and administration of the charity, network and information security, including preventing unauthorised access;
-
For Completion of all regulatory requirements
-
Processing for direct marketing purposes
Special Category processing. We process special category data when we:
-
Have your explicit consent to do so; or
-
We are able to process data about your disability condition as we are a not-for-profit body which provides support to individuals with a particular disability or medical condition
How do we keep this information safe?
We respect your privacy and will keep your information safe and secure.
How long do we keep your personal data?
We only keep your personal information for as long as we need.
-
We only keep your personal contact details for as long as we need to ensure your JAM Card or app are delivered to you.
-
If you request a JAM Card we will delete your personal contact information after 8 weeks. If you agree to receive updates we will hold your information until you unsubscribe.
-
The sensitive information about your disability condition is stored separately from your contact details (which we delete after 8 weeks).
Information we collect from other sources –
-
Electronic Newsletters - We use Mailchimp to send newsletters to subscribers. You can read Mailchimp's privacy notice here.
-
Standard internet log information such as your IP address and visitor behaviour patterns. We use Google Analytics to analyse website traffic. You can get more information on Google's security and privacy principles here.
Do we share your personal information?
-
We don’t share your personal information with any other organisations except for our third-party JAM App developer.
-
We may share your anonymised data for research and funding purposes to third-parties.
If you are a Republic of Ireland, JAM App user, we may transfer your data to the UK. We have ensured we have additional data protection safeguards in place to securely transfer your personal data to the UK.
Have you heard about GDPR?
GDPR is a new law about keeping personal information safe. Under this new law you can do the following.
-
You can ask us to let you see the information we hold about you so you can check it is correct
-
You can ask us to change information that is not correct.You can ask us to delete your information if you do not want us to hold it.
-
You can tell us that you do not want to receive any more information from us.
What do I do if I am not happy about how you use or store my information?
Contact us
You can call our office and ask to speak to the Data Protection Officer or you can email dpo@nowgroup.org.
Contact the Information Commissioners Office
The Information Commissioners Office is responsible for making sure that the new GDPR Data Protection laws are carried out. You can contact them by following this link: https://ico.org.uk/concerns/.